General discussion

Locked

Monitor Lock/Unlock Computer Event

By Jeremy The IT Guy ·
Is there a way to tell when a user locks/unlocks their computer? I have told all employees to lock their workstations before leaving there offices at night. I am having some salary employees taking advantage of the fact that they are on salary andI'd like to know when the user gets here by logging their unlock computer event. Does anyone know how I can achieve this? Thanks, Jeremy

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Monitor Lock/Unlock Computer Event

by vpnetadmin In reply to Monitor Lock/Unlock Compu ...

You can accomplish this by auditing the security event logs. Under Security Log properties, go to filter & check the Success audit. Event source & Category should set to [all]. If not at least in event source set to "security". When the user lockedtheir workstation , it will write the event log - (Security log) as category logon/logoff, & event ID 528. & when the user logged in back, it will write event as 538 , as category logon/logoff .It will show the time stamps too, so that you can monitor the users logon/logoff timings.
Hope this will help you. Considered users having W2K prof/Nt workstations.

Collapse -

Monitor Lock/Unlock Computer Event

by Jeremy The IT Guy In reply to Monitor Lock/Unlock Compu ...

I knew the answer for logging on and logging off but I need to be able to monitor lock/unlocking of the machine. Thanks, Jeremy

Collapse -

Monitor Lock/Unlock Computer Event

by Jeremy The IT Guy In reply to Monitor Lock/Unlock Compu ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums